This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
File: CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft (raw, json)
Hash identifier: vJqGiRcLG65uj6k/FMscGk86eowQyhpr4d9L3MXfjt0=
Subject key identifier: 41:A5:0C:7B:F9:26:0E:45:A4:EC:A6:7E:C8:82:4E:95:52:74:5A:42
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Certificate issuer: /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial: 70E9C2A0E16C2093A422443A5A02501FAAF2B284
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access: rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
Manifest number: 036D
Signing time: Sun 25 Jan 2026 07:07:12 +0000
Manifest this update: Sun 25 Jan 2026 07:02:12 +0000
Manifest next update: Mon 26 Jan 2026 09:37:12 +0000
Files and hashes: 1: 3137302e37382e39362e302f32322d3234203d3e20323636323639.roa (hash: HnG1DMJoAuqnzDxdBRoltWz1OrOXM/EvggoTnkRAc/Q=)
2: CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl (hash: 2T8gz6RzeVnYECErLOIavpAjefKgM6QrAfmjteOGdKI=)
3: 323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (hash: 0RAwiE1uQZC4AnhcHcz8NAlKcFd2Q+l+WGtwVHrZPlg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 09:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e9:c2:a0:e1:6c:20:93:a4:22:44:3a:5a:02:50:1f:aa:f2:b2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Validity
Not Before: Jan 25 07:02:12 2026 GMT
Not After : Jan 26 09:37:12 2026 GMT
Subject: CN=41A50C7BF9260E45A4ECA67EC8824E9552745A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:11:5b:cc:d2:7b:0a:d0:1c:30:97:46:f7:
d4:e0:14:bd:42:76:f4:52:14:d6:8b:90:2e:f6:ed:
15:e6:16:b2:0f:6f:a7:23:fb:eb:4e:7a:e0:a4:61:
25:d7:4d:88:d7:b0:6a:43:6e:50:43:a2:24:8f:26:
28:37:3a:c6:ba:44:06:2b:a2:24:75:4e:f0:88:d0:
28:30:2d:2d:91:15:4c:31:5a:e7:61:49:93:4d:df:
7a:6b:bc:68:70:75:12:8f:67:93:70:7b:c8:2d:06:
3f:68:07:bd:ce:29:80:48:42:e2:ca:6d:87:e0:96:
50:b1:40:e6:6d:7a:0a:e1:6e:03:36:69:03:5a:46:
19:49:d5:1e:fd:43:bd:45:a5:ca:31:48:a0:23:d7:
fe:78:55:5f:73:34:4f:36:50:50:03:f1:cd:bf:da:
3d:d1:63:ef:0b:1e:ea:d7:4f:ea:ae:6f:bb:68:ee:
7d:13:a9:cc:51:40:be:2e:a1:37:0d:cf:e6:35:4c:
d9:4f:53:d7:d4:6b:86:59:32:0e:92:00:54:fa:4b:
29:f4:1e:87:ce:91:93:5d:1d:87:40:d8:3b:d5:db:
2c:c5:bc:7f:21:99:a0:54:06:10:fe:4f:4f:42:38:
14:40:a7:9c:66:ef:be:60:fb:82:b8:69:b4:58:e1:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A5:0C:7B:F9:26:0E:45:A4:EC:A6:7E:C8:82:4E:95:52:74:5A:42
X509v3 Authority Key Identifier:
keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f5:c5:dd:2d:33:96:a0:99:06:2e:c5:ab:fd:72:a7:ff:a2:
1b:84:87:20:9f:66:4a:cc:cd:52:ac:2e:c0:ba:3e:a3:72:25:
aa:92:52:d7:8d:55:cf:6e:fe:23:52:c5:58:8c:57:85:90:27:
61:dc:ee:6e:28:b4:90:3e:35:71:db:02:09:75:96:1f:d5:11:
a7:f8:4d:2d:24:0b:96:0f:70:11:a0:f0:28:e2:0e:19:f6:43:
30:96:b1:5a:c3:87:43:4a:e5:bd:57:36:5c:28:05:13:71:52:
28:4a:7a:83:58:5a:63:90:f7:02:b7:71:b8:9e:fc:f4:fe:c2:
66:19:85:51:61:a7:7b:df:14:a7:e1:7c:23:39:0b:95:53:11:
43:9d:87:31:bb:b4:a5:cd:84:13:85:72:d9:df:20:d0:58:57:
8c:66:80:d6:14:6f:f8:93:ef:26:92:e0:d3:67:52:9a:c6:55:
44:9e:b1:52:c0:b3:cc:1a:5d:78:03:ec:b7:52:59:9b:ce:0a:
03:70:5a:2c:ca:d1:38:aa:8e:11:70:d8:cf:93:3a:4d:89:00:
41:36:20:f2:fc:33:1c:58:9b:1e:b4:cf:d5:d4:f1:c2:f3:27:
2b:f9:ed:64:b9:0d:43:63:98:49:ff:24:21:64:e6:63:8a:0c:
b8:34:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:02:47 2026 by rpki-client